RHEL 8 : Red Hat Single Sign-On 7.4.9 security update on RHEL 8 (Moderate) (RHSA-2021:3529)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3529 advisory. Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

io.quarkus:quarkus-keycloak-admin-client (>=1.5.0.cr1, <=1.5.0.final), io.quarkus:quarkus-keycloak-admin-client-deployment (>=1.5.0.cr1, <=1.5.0.final) +63 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (10.0.0)

org.keycloak:keycloak-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.quarkus:quarkus-keycloak-admin-client =1.5.0.cr1, =1.5.0.cr1, =1.5.0.cr1, =1.5.0.cr1, =0.5.0, =0.5.0,...

org.keycloak:keycloak-adapter-core (2.1.0.cr1), org.keycloak:keycloak-admin-client (2.1.0.cr1) +48 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (2.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.1.0.cr1 - org.keycloak:keycloak-admin-client 2.1.0.cr1 -...

com.canoo.dolphin-platform:dolphin-platform-security-client (>=0.19.0, <=1.0.0.cr3), de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20) +68 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (3.1.0.final)

org.keycloak:keycloak-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-security-client =0.19.0, =1.3.0, =1.3.0, =2.2.3 -...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.4.10, <=0.4.11), com.avast.grpc.jwt:keycloak (0.4.9) +139 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (12.0.4)

org.keycloak:keycloak-core MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak =0.4.10, =1.5.3, =12.0.4.0, =12.0.4.0, =12.0.4.1 and more Source...

org.keycloak:keycloak-account-api (1.0-beta-1), org.keycloak:keycloak-account-freemarker (1.0-beta-1) +38 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.0-beta-1)

org.keycloak:keycloak-core MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-beta-1 - org.keycloak:keycloak-account-freemarker 1.0-beta-1 -...

org.hawkular.accounts:hawkular-accounts (>=2.0.20.final, <=2.0.22.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.20.final, <=2.0.22.final) +93 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.8.1.final)

org.keycloak:keycloak-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.20.final, =2.0.20.final, =2.0.20.final, =2.0.20.final,...

org.keycloak:keycloak-account-api (1.0.2.final), org.keycloak:keycloak-account-freemarker (1.0.2.final) +48 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.0.2.final)

org.keycloak:keycloak-core MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.2.final - org.keycloak:keycloak-account-freemarker 1.0.2.final ...

org.keycloak:keycloak-adapter-core (2.5.1.final), org.keycloak:keycloak-admin-client (2.5.1.final) +52 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (2.5.1.final)

org.keycloak:keycloak-core MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.1.final - org.keycloak:keycloak-admin-client 2.5.1.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.1.final), org.jenkins-ci.plugins:keycloak (2.1.0) +59 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (3.4.0.final)

org.keycloak:keycloak-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.1.final - org.jenkins-ci.plugins:keycloak 2.1....

org.keycloak:keycloak-account-api (1.7.0.cr1), org.keycloak:keycloak-account-freemarker (1.7.0.cr1) +80 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.7.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.7.0.cr1 - org.keycloak:keycloak-account-freemarker 1.7.0.cr1 -...

com.kumuluz.ee.security:kumuluzee-security-keycloak (>=1.0.0, <=1.0.1), de.adorsys.keycloak:keycloak-config-cli (>=0.1.0-2, <=0.1.0-3) +60 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (3.2.1.final)

org.keycloak:keycloak-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kumuluz.ee.security:kumuluzee-security-keycloak =1.0.0, =0.1.0-2, =1.2.0-beta.2, =1.2.0.final -...

edu.byu.hbll.maven:application-parent (>=3.0.0, <=3.4.0), org.keycloak:keycloak-adapter-core (4.8.2.final) +64 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (4.8.2.final)

org.keycloak:keycloak-core MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - edu.byu.hbll.maven:application-parent =3.0.0, =3.4.0 - org.keycloak:keycloak-adapter-core 4.8.2.final...

org.keycloak:keycloak-account-api (1.0.3.final), org.keycloak:keycloak-account-freemarker (1.0.3.final) +48 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.0.3.final)

org.keycloak:keycloak-core MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.3.final - org.keycloak:keycloak-account-freemarker 1.0.3.final ...

it.vige:school-jsf (>=1.2.0, <=1.2.1), org.keycloak:keycloak-adapter-core (4.8.1.final) +64 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (4.8.1.final)

org.keycloak:keycloak-core MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - it.vige:school-jsf =1.2.0, =1.2.1 - org.keycloak:keycloak-adapter-core 4.8.1.final -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +70 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (9.0.2)

org.keycloak:keycloak-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.2 -...

ca.bc.gov.tno:dal-db (0.0.8-alpha), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.4.12) +102 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (13.0.1)

org.keycloak:keycloak-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ca.bc.gov.tno:dal-db 0.0.8-alpha - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.4.12 -...

org.keycloak:keycloak-account-api (1.0.1.final), org.keycloak:keycloak-account-freemarker (1.0.1.final) +48 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.0.1.final)

org.keycloak:keycloak-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.1.final - org.keycloak:keycloak-account-freemarker 1.0.1.final ...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (1.0-rc-1)

org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

org.keycloak:keycloak-adapter-core (3.1.0.cr1), org.keycloak:keycloak-admin-client (3.1.0.cr1) +56 more potentially affected by CVE-2021-3632 via org.keycloak:keycloak-core (3.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.1.0.cr1 - org.keycloak:keycloak-admin-client 3.1.0.cr1 -...